We can't able to access 9800CL WLC through GUI, Version17.02.01

[Adarsh Kottolath]

ip http server
ip http authentication local
ip http secure-server
ip http secure-trustpoint CISCO_IDEVID_SUDI
ip http client source-interface GigabitEthernet1
destination transport-method http

I have enabled this above commands as well, But unable to access through it GUI? Could anyone help

[ammahend]

assuming you have network connectivity, try wireless management interface vlan <your management vlan>

[Adarsh Kottolath]

Jul 7 09:57:17.402: %WEBSERVER-5-CONNECTION_FAILED: Chassis 1 R0/0: nginx: connection failed from host 100.70.0.10 - Cipher Mismatch/No shared cipher
Jul 7 09:57:23.635: %WEBSERVER-5-CONNECTION_FAILED: Chassis 1 R0/0: nginx: connection failed from host 100.70.0.10 - Cipher Mismatch/No shared cipher
Jul 7 09:58:18.844: %WEBSERVER-5-CONNECTION_FAILED: Chassis 1 R0/0: nginx: connection failed from host 100.70.0.10 - Cipher Mismatch/No shared cipher

Getting this error from WLC logs

[marce1000]

               - FYI : https://bst.cloudapps.cisco.com/bugsearch/bug/CSCvs60354

  (appendix) : Also engage in  -> Have a checkup review of your current 9800CL WLC configuration with the CLI command show tech wireless ; feed the output into 
                                        https://cway.cisco.com/wireless-config-analyzer/

 M.

[marce1000]

 - Have a checkup review of your current 9800CL WLC configuration with the CLI command show tech wireless ; feed the output into 
                                        https://cway.cisco.com/wireless-config-analyzer/

 M.

[Leo Laohoo]

Please stop using single-release versions, like 17.2.1. 

Upgrade to 17.9.3 (or soon-to-be-released 17.9.4) for stability reasons.

[Rich R]

Like Leo says you should only ever be using a limited support release (in between 17.6, 17.9, 17.12 etc) when you need a new feature which isn't yet available in an extended support release.  Then as soon as the next extended support release is out and on the TAC recommended list (link below) you should upgrade to that.  So you should have been on at least 17.3 since a long time ago.  As Leo says the correct path now is 17.9.3 and note there are some SMUs and APSPs available for that with extra fixes until 17.9.4 is out.

FYI: "ip http client " commands apply to the WLC being an http client (like when it initiates a connection to smart licensing) so have no impact on the http server function on the WLC.